{ pkgs, ... }:
{
  boot = {
    loader = {
      systemd-boot.enable = true;
      efi.canTouchEfiVariables = true;
    };
    kernel = {
      sysctl = {
        "kernel.unprivileged_userns_clone" = true;
      };
    };
    kernelPackages = pkgs.linuxPackages_xanmod_latest;
  };
}
